SMB license

[Moudar]

Hi

I got SMB 1575 appliance. On the appliance the license is active:

But on SMS the license is not active:

What should be done to correct that?

[Lesley]

SMB-18388

In Centrally Managed appliances, SmartConsole sometimes shows inaccurate license information for Software Blades such as "No License" or "About to Expire."

R81.10.00

As stated in: https://support.checkpoint.com/results/sk/sk178604

From TAC I got once this reply:

The license and contract should be verified only from the Gaia portal or the command line.
That device is meant for local management only and It was not designed to view all the details in the smart console.

[Moudar]

So, that means we need to live with that message in SMS?!

[Chris_Atkinson]

For DAIP gateways there is a known limitation...

[Moudar]

but I got another gateway which has exactly the same configuration (same appliance 1575) and that is green on SMS without any problem!

[Chris_Atkinson]

We would need to see the "cplic print" info to understand further if the issue is solely related to the limitation.

[Moudar]

This one has problem (expired license on SMS):

cplic print
Host             Expiration  Features
127.0.0.1        never       CPAP-AP1575 CPSB-FW CPSG-C-4-U CPSB-VPN CPSB-SSLVPN-200 CPSB-IA CPSB-ADNC CPSB-ADNC-M CK-xx-xx-xx-xx-xx-xx

Contract Coverage:

 #   ID          Expiration   SKU
===+===========+============+====================
1  | BY4H9BT   | 18Aug2025  | CPCES-CO-PREMIUM-1575-ADD
   +-----------+------------+--------------------
   |Covers:     CPAP-AP1575 CPSB-FW CPSG-C-4-U CPSB-VPN CPSB-SSLVPN-200 CPSB-IA CPSB-ADNC CPSB-ADNC-M CK-xx-xx-xx-xx-xx-xx

And this one does not show any problem:

cplic print
Host             Expiration  Features
127.0.0.1        never       CPAP-AP1575 CPSB-FW CPSG-C-4-U CPSB-VPN CPSB-SSLVPN-200 CPSB-IA CPSB-ADNC CPSB-ADNC-M CK-xx-xx-xx-xx-xx-xx

Contract Coverage:

 #   ID          Expiration   SKU
===+===========+============+====================
1  | PSGQM7U   | 10Sep2025  | CPCES-CO-PREMIUM-1575-ADD
   +-----------+------------+--------------------
   |Covers:     CPAP-AP1575 CPSB-FW CPSG-C-4-U CPSB-VPN CPSB-SSLVPN-200 CPSB-IA CPSB-ADNC CPSB-ADNC-M CK-xx-xx-xx-xx-xx-xx
===+===========+============+====================

[Chris_Atkinson]

You may find that it clears after the evaluation period ends.

How does the "Device & License Information" window in SmartConsole look for the "working" one by comparison? i.e. Does it report an IP value different to: "0.0.0.1"

[Moudar]

you can see 2 gateways running with dynamic IP both are 1575 one (test7) shows expired license!

[G_W_Albrecht]

Looks in WebGUI like test7 has no valid license for services, only for the perpetual blades. Same with Ugglan-2 ?

[Moudar]

this is from test7:

cplic print
Host             Expiration  Features
127.0.0.1        never       CPAP-AP1575 CPSB-FW CPSG-C-4-U CPSB-VPN CPSB-SSLVPN-200 CPSB-IA CPSB-ADNC CPSB-ADNC-M CK-xx-xx-xx-xx-xx-xx

Contract Coverage:

 #   ID          Expiration   SKU
===+===========+============+====================
1  | BY4H9BT   | 18Aug2025  | CPCES-CO-PREMIUM-1575-ADD
   +-----------+------------+--------------------
   |Covers:     CPAP-AP1575 CPSB-FW CPSG-C-4-U CPSB-VPN CPSB-SSLVPN-200 CPSB-IA CPSB-ADNC CPSB-ADNC-M CK-xx-xx-xx-xx-xx-xx

[G_W_Albrecht]

I was talking about first screenshot feat. No license lines for services !

[Moudar]

first screenshot was what smartconsole shows, but cplic print shows active license (if i understood it corrcet)

what gonna happen on date 21/7. Will we lost that gateway or the license is active?

[Chris_Atkinson]

The cplic print output is what really matters.

[G_W_Albrecht]

The cplic print shows that all services have expired - so there is a reason for the license warning from SMS, as a GW without IPS and TP is not very helpfull in most situations 😉

The statement in Dashboard is just not true as the eval lic shown is not present in the cplic print...

[Moudar]

So, what should be done in this situation?

What does 18Aug2025 mean here?

BY4H9BT   | 18Aug2025  | CPCES-CO-PREMIUM-1575-ADD

the eval license expire on 20th July and then the paid license takes over?!

[PhoneBoy]

Outside of basic Firewall/VPN features, most other features require a contract.
The fixed license is required to even configure the features.
You appear to have a contract for them, which in your case expires on 18 August 2025.

After that contract expires (and absent any additional contracts added later), the contracted features will no longer work.
Basic firewall/VPN features should continue to work.

All of this can be confirmed with Account Services: https://help.checkpoint.com

[G_W_Albrecht]

That collaborative premium support on the appliance ends on 18Aug2025 - but that includes no TP service contracts...

[Moudar]

So, what s gonna happen after 20th July?

[G_W_Albrecht]

Nothing new - the SMS shows that the eval lic is not installed (Blades show as Available), so you will see no difference...

[Chris_Atkinson]

How does the device display now, is it still showing an evaluation?

You could try the solution from the below else would advise engaging with TAC to confirm the previously sighted limitation applies.

https://community.checkpoint.com/t5/Security-Gateways/License-about-to-expire-but-Expiration-Date-in...

[Moudar]

Yes, still the same!

[Chris_Atkinson]

It would be easiest to take the output of "cplic print" from the appliance CLI along with the details as you see them within Usercenter and discuss with your local SE / account team.

[Jason_Elmore1]

Check out this thread, I've had to use this method pretty much every time I deploy a new 1500.

Solved: License warning messages - Check Point CheckMates